Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/pdeSxSNdYqXDAoW_VFCMezPKJgg.roa
File:                     pdeSxSNdYqXDAoW_VFCMezPKJgg.roa (raw, json)
Hash identifier:          ndeg+8++BIIQcf3ddJp8UIhcaeR3nPkJNoFAYy0CpLw=
Subject key identifier:   A5:D7:92:C5:23:5D:62:A5:C3:02:85:BF:54:50:8C:7B:33:CA:26:08
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       013E
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/pdeSxSNdYqXDAoW_VFCMezPKJgg.roa
Signing time:             Tue 31 Mar 2026 07:36:49 +0000
ROA not before:           Tue 31 Mar 2026 07:36:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9370
IP address blocks:        59.106.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Mar 31 07:36:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A5D792C5235D62A5C30285BF54508C7B33CA2608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3e:3b:e8:de:58:a3:f4:57:44:22:17:9a:64:
                    d1:3f:cb:8d:7a:e7:06:6d:0d:02:36:a9:db:84:b9:
                    83:22:14:82:ff:0f:2d:dc:36:90:e1:48:1b:3f:03:
                    79:cb:e6:d8:f2:23:ee:0f:74:ab:d5:65:4a:3e:04:
                    76:31:bd:fa:a8:35:98:55:7c:c8:2d:8d:34:65:49:
                    9f:f8:b6:03:60:ac:ea:75:4c:76:40:82:b3:ae:b1:
                    1d:9b:f5:7e:00:52:be:8c:70:51:f3:86:ba:1d:ab:
                    2d:81:d4:11:a2:7e:58:be:69:cf:a6:90:e0:a2:18:
                    92:1a:e3:9e:a1:32:4d:bc:42:65:4e:0d:b6:c0:41:
                    c2:c9:81:eb:d1:45:e5:03:71:26:ed:04:28:cd:78:
                    b7:67:00:f0:e3:60:3a:a3:45:6b:9e:80:22:9a:16:
                    cb:68:06:80:1d:e9:36:92:ba:16:d0:df:fe:84:a2:
                    eb:af:e9:a2:7c:06:2b:62:e3:2c:5c:09:82:e3:78:
                    9c:06:55:a8:c1:7e:f4:0b:cf:1a:05:07:9f:0f:fd:
                    e7:46:a2:73:f9:0e:40:34:41:09:3d:d3:24:01:00:
                    7c:32:52:69:31:fd:85:46:48:78:5b:e4:28:ed:62:
                    31:52:87:30:b9:4d:11:53:9e:c6:69:a0:54:c6:40:
                    7c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D7:92:C5:23:5D:62:A5:C3:02:85:BF:54:50:8C:7B:33:CA:26:08
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/pdeSxSNdYqXDAoW_VFCMezPKJgg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.106.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a4:14:92:d7:f1:e0:0b:76:6d:da:a9:ea:dd:fa:0a:94:28:26:
         e5:b7:00:1c:c5:3e:09:e5:3e:4a:f7:20:5c:6d:74:b9:23:a7:
         82:38:ca:83:d8:d7:50:c9:b7:c0:3c:0c:75:dc:d7:cd:4f:7a:
         ec:b5:b4:cd:59:66:fb:94:8b:29:5d:f2:bb:4d:ed:94:dc:3b:
         bc:19:d1:fc:13:5c:56:ef:be:7f:f0:96:ed:26:6f:15:80:a3:
         0f:3c:ff:23:e6:36:ea:e2:77:9b:c8:d2:0a:b0:e4:60:0e:64:
         23:18:a2:5e:ae:ed:f8:27:8f:95:99:48:6d:83:99:7c:7d:31:
         8b:2a:47:35:85:01:1f:1f:80:19:8d:3a:c6:c6:48:63:66:9f:
         2f:32:f0:ab:4a:c5:49:23:8f:9e:76:4d:35:4c:70:31:16:32:
         12:3d:f2:e9:52:2c:43:fc:1d:a9:85:0a:2a:47:de:87:e7:38:
         17:f9:04:21:42:52:3b:55:d4:7e:e1:18:42:51:f0:64:5f:cb:
         c3:44:fd:78:4b:9d:79:ca:7d:99:c1:0e:2d:77:22:57:d6:51:
         a2:1f:c5:5b:ff:a8:f5:31:c9:58:52:b2:d0:49:fe:ea:12:77:
         32:9c:40:a5:f9:91:f7:cd:c9:81:46:b8:dc:e1:54:fe:79:ee:
         c8:0b:31:1a
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy
MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yNjAzMzEw
NzM2NDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE1RDc5MkM1MjM1RDYy
QTVDMzAyODVCRjU0NTA4QzdCMzNDQTI2MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGPjvo3lij9FdEIheaZNE/y4165wZtDQI2qduEuYMiFIL/Dy3c
NpDhSBs/A3nL5tjyI+4PdKvVZUo+BHYxvfqoNZhVfMgtjTRlSZ/4tgNgrOp1THZA
grOusR2b9X4AUr6McFHzhrodqy2B1BGifli+ac+mkOCiGJIa456hMk28QmVODbbA
QcLJgevRReUDcSbtBCjNeLdnAPDjYDqjRWuegCKaFstoBoAd6TaSuhbQ3/6Eouuv
6aJ8Biti4yxcCYLjeJwGVajBfvQLzxoFB58P/edGonP5DkA0QQk90yQBAHwyUmkx
/YVGSHhb5CjtYjFShzC5TRFTnsZpoFTGQHzHAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUpdeSxSNdYqXDAoW/VFCMezPKJggwHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W
wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo
bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMjQ3L3BkZVN4U05kWXFYREFvV19WRkNNZXpQS0pnZy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAc7agAwDQYJKoZIhvcNAQELBQADggEB
AKQUktfx4At2bdqp6t36CpQoJuW3ABzFPgnlPkr3IFxtdLkjp4I4yoPY11DJt8A8
DHXc181Peuy1tM1ZZvuUiyld8rtN7ZTcO7wZ0fwTXFbvvn/wlu0mbxWAow88/yPm
Nurid5vI0gqw5GAOZCMYol6u7fgnj5WZSG2DmXx9MYsqRzWFAR8fgBmNOsbGSGNm
ny8y8KtKxUkjj552TTVMcDEWMhI98ulSLEP8HamFCipH3ofnOBf5BCFCUjtV1H7h
GEJR8GRfy8NE/XhLnXnKfZnBDi13IlfWUaIfxVv/qPUxyVhSstBJ/uoSdzKcQKX5
kffNyYFGuNzhVP557sgLMRo=
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:27 2026 by rpki-client